Mockapetris hired as ICANN security advisor

DNS inventor Paul Mockapetris has been recruited by ICANN to act as senior security advisor to the Generic Domains Division under its president, Akram Atallah.
It’s not clear precisely what Mockapetris’ role will be, though it doesn’t appear to be a full-time position. He is still chairman and chief scientist of DNS software vendor Nominum.
ICANN recently recorded an interview with Mockapetris in which he pooh-poohed Verisign’s campaign against new gTLDs on security grounds, saying name collisions were not a new phenomenon.
It’s not the first time ICANN has hired a “name” as a security advisory.
One of the inventors of public key cryptography, Whitfield Diffie, became VP of information security under former CEO Rod Beckstom but quietly disappeared not too long after Fadi Chehade took over last year.

Registrars given access to Trademark Clearinghouse

Accredited registrars on older contracts can now get access to the Trademark Clearinghouse for testing purposes, ICANN announced last night.
Previously, ICANN was only handing out credentials to registrars on the new 2013 Registrar Accreditation Agreement, but many registrars complained that this didn’t give them time to evaluate the TMCH and the RAA at the same time.
ICANN had originally argued that the restriction made sense because the TMCH is used only for new gTLDs, and registrars must have signed the 2013 RAA to sell new gTLD domains.
But feedback from registrars has helped it change its mind. ICANN said:

all ICANN accredited Registrars, not just those that have signed the 2013 Registrar Accreditation Agreement (RAA), will be able to request registration tokens and start testing their systems with the Trademark Clearinghouse database before it must begin its authenticating and verifying services for trademark data.

Instruction for signing up for TMCH testing can be found here.

First gTLD Extended Evaluation results published

ICANN has delivered the first three results of Extended Evaluation for new gTLD applications, all passes.
Dot Registry, which has applied for five corporate-themed gTLDs, flunked its Initial Evaluation on .ltd and .llc back in June on financial grounds, but complained a few days later that ICANN’s evaluators had screwed up.
The company told DI at the time that the two bids used the same Continuing Operation Instrument as applications that had passed IE, and was baffled as to why they failed their financial evaluation.
Both applications have now passed through Extended Evaluation with passing scores, the COI-related score going up from 0 (no COI) to 3 (a perfect score).
Both .ltd and .lcc and still contested, and both also face the uncertainty of Governmental Advisory Committee advice and “uncalculated risk” scores, so the time impact of EE on other applicants is zero.
Also passing through EE this week was Express LLC’s dot-brand bid for .express.
The company had failed on technical grounds in Initial Evaluation, having scored an unacceptable 0 on “Abuse Prevention and Mitigation”. Under EE, this has increased to 2, a pass.
Express is still in contention with Donuts.
This week we also see eight applications, seven of them dot-brands, finally making it through Initial Evaluation: .boehringer, .deloitte, .abbvie, .lamer, .abc, .rogers, .fido and the generic .bar.
The DI PRO Application Tracker and associated tools have now been updated to take account of Extended Evaluation results.

Eleven TLDs get removed from the DNS

ICANN will soon remove 11 experimental internationalized domain name TLDs from the domain name system.
The TLDs, which represent “.test” in nine scripts and 10 languages, were added to the root almost exactly six years ago in preparation for ICANN’s IDN ccTLDs program.
Now that the program is quite mature, with a few dozen IDN ccTLDs live on the internet with no major reported problems, ICANN has decided that the test TLDs are no longer required.
They will be removed from the DNS root zone on October 31, ICANN said.

.pink and two other gTLDs get contracts

ICANN has signed Registry Agreements this week with three new gTLD applicants, covering the strings .wed, .ruhr and .pink.
I would characterize these strings as a generic, a geographic and a post-generic.
regiodot GmbH wants to use .ruhr as a geographic for the Ruhr region of western Germany while Atgron wants to providing marrying couples with .wed for their wedding-related web sites.
Afilias’ .pink belongs to that unusual category of applied-for gTLDs that I’m becoming increasingly interested in: the non-SEO generic.
The vast majority of generic, open gTLDs that have been applied for (mostly by domainer-driven portfolio applicants) in the current round are essentially “keyword” strings — stuff that’s very likely going to prove useful in search engine optimization.
I’m talking here about stuff like .music, .video, .football and .porn. These may prove popular with small business web site owners and domainers.
But there’s another category of generic gTLDs I believe have little SEO value but offer a certain quirky-cool branding opportunity that may prove attractive to regular, non-commercial registrants.
I’d put strings such as .ninja, .bom, .wow, .hot, .love and .pink into this category.
I’m very curious to see how these kinds of strings fare over the next few years, as I suspect we may see many more such applications in future gTLD rounds.

New gTLD delegations probably not delayed by US government shutdown

If the US government shuts down tonight, would that delay the delegation of new gTLDs?
Probably not, from what I gather.
For reasons beyond the ken of most sane people*, the US legislature is currently deadlocked on a bill that would provide the funds to keep the executive wing of the government running.
It’s looking increasingly likely that the government is to shut down.
That’s a big deal for a whole range of important reasons, obviously, but it also has implications for new gTLD applicants.
The DNS root zone belongs to the US government, remember.
It’s managed by Verisign and ICANN’s IANA department suggests appropriate changes, but without USG the tripartite relationship that enables new TLDs to be delegated falls apart.
Without the NTIA in the mix, ICANN can make all the root zone change requests it wants and Verisign lacks the authority to execute them.
So there’s a reason to be worried if you’re a new gTLD applicant. If the National Telecommunications and Information Administration is out of the office for an indeterminate period, you may be looking at more delays.
However, it looks like the NTIA may have got that covered.
According to the Department of Commerce’s “Plan for Orderly Shutdown Due to Lapse of Congressional Appropriations”, (pdf) a “Telecomm. Policy Specialist”, tasked with “Emergency protection of internet management (ICANN)” is on the list of “Excepted Positions”.
I gather that this means that there’s going to be an NTIA person working during any possible shutdown to manage root zone changes, including gTLD delegations.
* It’s been several years since I lived in the States, and my grasp of the nuance of American political life has waned accordingly, but I gather the shutdown is somehow related to protecting insurance companies’ profit margins. Or defending the constitutional right to get better healthcare than people poorer than yourself. Something like that.

Crocker to speak at second gTLD collisions summit

ICANN chair Steve Crocker is among a packed line-up of speakers for an event on Tuesday that will address the potential security risks of name collisions in the new gTLD program.
It’s the second TLD Security Forum, which are organized by new gTLD applicants unhappy with ICANN’s proposal to delay hundreds of “uncalculated risk” applied-for gTLDs.
The first event, held in August, was notable for statements playing down the risk from the likes of Google and Digicert.
While Crocker is scheduled to speak on Tuesday, anyone expecting insight into the ICANN board’s thinking on name collisions is likely to be disappointed.
The title of his talk is “The Current State of DNSSEC Deployment”, which isn’t directly relevant to the issue.
Crocker, due to conflicts of interest protections, is also not a member of ICANN’s New gTLD Program Committee, which is tasked with making decisions about the collision problem.
While Crocker’s views may wind up remaining private, we can’t say the same for Amy Mushahwar and Dan Jaffe, representing the Association of National Advertisers, both of whom are also speaking.
The ANA is firmly in the Verisign camp on this issue, claiming that gTLD name collisions create unacceptable security risks for organizations on the internet.
Also on the line-up for Tuesday are Laureen Kapin of the US Federal Trade Commission and Gabriel Rottman of the American Civil Liberties Union, both of whom could bring new perspectives to the debate.
The TLD Security Forum begins at 9am at the Washington Hilton and Heights Meeting Center in Washington, DC. It’s free to attend and will be webcast for those unable to show up in person.

Samsung signs the first dot-brand gTLD contract

Samsung has become the first company to sign a Registry Agreement for a dot-brand gTLD.
As of yesterday, the electronics giant is now officially contracted with ICANN to run .삼성, its name in its native Korean.
It’s surprising that Samsung would be the first; while its application has priority number 18, its application also makes it pretty obvious it’s a primarily defensive move, reading:

The new gTLD proposed by SAMSUNG SDS has purpose in protecting online brand of SAMSUNG Group including SAMSUNG by defending abusive registration by third parties and further raising global awareness by domain usage utilizing company name.

The contract has not yet been published in full — expect that over the next few days — so it’s not yet clear whether Samsung has managed to negotiate any special dot-brand-specific amendments.
The base Registry Agreement contains lots of obligations, such as Sunrise periods, that really aren’t applicable to single-registrant spaces.
I understand the new Brand Registry Group is currently trying to negotiate a baseline set of dot-brand amendments with ICANN, so it’s possible that Samsung has jumped the gun by signing so soon.
But it could also mean that .삼성 will be the first-ever dot-brand TLD to go live on the internet, which is likely to benefit from substantial media coverage compared to subsequent delegations.
ICANN has signed 48 new gTLD contracts since July, way behind its originally target of 40 per week.
.삼성 will have its back-end registry managed by .kr ccTLD operator KISA.

ICANN to publish new gTLD contract changes

ICANN has decided to start publishing red-lined versions of its new gTLD Registry Agreements, so applicants can see what special terms ICANN is willing to accept.
It’s a reversal of its previous position, and follows complaints from applicants and back-end providers.
So far ICANN has signed almost 50 new gTLD contracts, all of which have been published, but it’s not easy to compare them all to the baseline Registry Agreement found in the Applicant Guidebook.
By publishing versions with the changes highlighted, applicants will be able to go into contract negotiations with a better idea of how far ICANN is willing to bend.
ICANN said today:

Upon further consideration, ICANN has concluded that publishing redlined versions of Registry Agreements would be helpful to the entire ICANN community, and would also support ICANN’s efforts to provide operational transparency.

It added that so far there have been no substantial changes in the contracts it’s signed, apart from gTLD-specific Public Interest Commitments and approved Registry Services.
It will start publishing the redlines next month.

Donuts’ trademark block list goes live, pricing revealed

Donuts’ Domain Protected Marks List, which gives trademark owners the ability to defensively block their marks across the company’s whole portfolio of gTLDs, has gone live.
The service goes above and beyond what new gTLD registries are obliged to offer by ICANN.
As a “block” service, in which names will not resolve, it’s reminiscent of the Sunrise B service offered by ICM Registry at .xxx’s launch, which was praised and cursed in equal measure.
But with DPML, trademark owners also have the ability to block “trademark+keyword” names, for example, so Pepsi could block “drinkpepsi” or “pepsisucks”.
It’s not a wildcard, however. Companies would have to pay for each trademark+keyword string they wanted blocking.
DPML covers all of the gTLDs that Donuts plans to launch, which could be as many as 300. It currently has 28 registry agreements with ICANN and 272 applications remaining in various stages of evaluation.
Trademark owners will only be able to sign up to DPML if their marks are registered with the Trademark Clearinghouse under the “use” standard required to participate in Sunrise periods.
Donuts is also excluding an unspecified number of strings it regards as “premium”, so the owners of marks matching those strings will be out of luck, it seems.
Blocks will be available for a minimum of five years an maximum of 10 years. After expiration, they can be renewed with minimum terms of one year.
The company has not disclose its wholesale pricing, but registrars we’ve found listing the service on their web sites so far (101domain and EnCirca) price it between $2,895 and $2,995 for a five-year registration.
It looks pricey, but it’s likely to be extraordinarily good value compared to the alternative of Sunrise periods.
If Donuts winds up with 200 gTLDs in its portfolio, a $3,000 price tag ($600 per year) works out to a defensive registration cost of $3 per domain per gTLD per year.
If it winds up with all 300, the price would be $2.
That’s in line (if we’re assuming non-budget pricing comparisons and registrars’ DPML markup), with Donuts co-founder Richard Tindal’s statement earlier this year: that DPML would be 5% to 10% the cost of a regular registration.
Tindal also spoke then about a way for rival trademark owners to “unblock” matching names, so Apple the record company could unblock a DPML on apple.music obtained by Apple the computer company, for example.
Donuts is encouraging trademark owners to participate before its first gTLDs goes live, which it expects to happen later this year.